Event ID: 40960 SPNEGO (Negotiator) authentication error

Windows Security

Hi!
I have upgraded one of my domaincontrollers from Windows 2000 to Windows
2003.
I have still got one domaincontroller that is windows 2000.
The 2003 DC have the FSMO roles, both DC's has the global catalog and
running DNS server .
After the upgrade I frequently get error loggings on 3 of my Windows 2003
memberservers.
I get Lsasrv Event ID 40960 and 40961 in the systemlogs one to two times a
day.
I tried to restart one of the memberservers and then the logging stopped for
a week.
I have installed one new server after the upgrade of the domain, on that
server I don't get any
errors. I don't have any lsasrv errors on my windows 2000 memberservers or
the domaincontrollers. I been reading the suggestions on Event id net
regarding this error, but no luck when it comes to solving the problem.
I have tried to find the error with netdiag. but every test gets passed.

Are you experiencing any problems with users being able to access resources
or other problems? IMHO if not I would not worry about it as an error one or
two times a day as most likely nothing to worry about if everything works
fine and you have already done your homework with netdiag and checking
EventID.net. The link below is to a Google search on that Event ID where
you may find some more info. --- Steve

"Mauricio Reyes" <maoreyes@hotmail.com> wrote in message
news:eF5ubOhWGHA.1220@TK2MSFTNGP02.phx.gbl...
> Hi!
> I have upgraded one of my domaincontrollers from Windows 2000 to Windows
> 2003.
> I have still got one domaincontroller that is windows 2000.
> The 2003 DC have the FSMO roles, both DC's has the global catalog and
> running DNS server .
> After the upgrade I frequently get error loggings on 3 of my Windows 2003
> memberservers.
> I get Lsasrv Event ID 40960 and 40961 in the systemlogs one to two times
> a
> day.
> I tried to restart one of the memberservers and then the logging stopped
> for
> a week.
> I have installed one new server after the upgrade of the domain, on that
> server I don't get any
> errors. I don't have any lsasrv errors on my windows 2000 memberservers or
> the domaincontrollers. I been reading the suggestions on Event id net
> regarding this error, but no luck when it comes to solving the problem.
> I have tried to find the error with netdiag. but every test gets passed.
>
> Has anyone a solution to this problem?
>
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40960
> Date: 2006-04-05
> Time: 05:59:15
> User: N/A
> Computer: vidstige
> Description:
> The Security System detected an authentication error for the server
> cifs/donald.test.nu. The failure code from authentication protocol
> Kerberos
> was "The attempted logon is invalid. This is either due to a bad username
> or
> authentication information.
> (0xc000006d)".
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 6d 00 00 c0
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40961
> Date: 2006-04-05
> Time: 05:59:15
> User: N/A
> Computer: vidstige
> Description:
> The Security System could not establish a secured connection with the
> server
> cifs/donald.test.nu. No authentication protocol was available.
>
>
>